Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4e9866105e54580f7df842806f60ac12e20119bf.roa
File:                     4e9866105e54580f7df842806f60ac12e20119bf.roa (raw, json)
Hash identifier:          kNEkCwcW61MAkY8igSkn0+tUtaLpFW+ZcU9VQolpEnk=
Subject key identifier:   3C:40:2F:FA:07:8B:4F:65:40:49:E8:42:08:56:9E:9B:BE:3D:43:EE
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A0541
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4e9866105e54580f7df842806f60ac12e20119bf.roa
Signing time:             Tue 06 Feb 2024 15:37:53 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        181.188.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753857 (0x2a0541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=4e9866105e54580f7df842806f60ac12e20119bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:10:42:dc:ec:bd:33:c9:eb:68:85:dc:43:ac:
                    27:5f:91:b3:4a:d3:c4:93:49:0a:94:29:ea:46:61:
                    d2:31:60:28:09:95:20:5b:ab:0b:99:80:5e:6c:da:
                    af:65:59:32:45:61:cc:70:6e:6b:50:22:fe:43:eb:
                    05:35:b5:36:da:5e:99:58:1a:8d:e0:e6:01:2d:f3:
                    f0:17:df:11:ce:b3:aa:43:47:46:d9:38:5a:b6:75:
                    0b:1f:6d:d3:83:84:30:d5:2e:9b:1d:b0:f3:64:20:
                    7e:08:71:b0:c3:4c:b3:bc:d6:1d:1e:32:06:8b:23:
                    da:65:bf:8d:79:0d:dc:ae:5b:39:6e:c9:7e:2d:70:
                    04:04:26:eb:44:8f:71:f4:5a:e4:d3:3d:3c:24:1c:
                    7c:d8:1b:9c:c8:6f:75:f5:71:b2:81:1c:1d:18:2f:
                    a9:83:fb:9e:3e:fd:d1:29:88:c2:ae:80:8b:84:77:
                    53:16:f9:29:5f:02:26:ae:13:23:9a:f3:97:fd:5f:
                    2c:4e:a4:6b:72:79:65:a9:72:d0:c9:f6:75:2b:9d:
                    e4:06:5d:02:19:0b:60:ce:f1:04:00:b8:6c:3d:33:
                    ae:fd:66:f1:a3:5d:f5:12:57:b5:9c:44:28:d1:c3:
                    89:8c:eb:61:34:b2:d2:13:93:47:5e:74:48:c0:0a:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:40:2F:FA:07:8B:4F:65:40:49:E8:42:08:56:9E:9B:BE:3D:43:EE
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4e9866105e54580f7df842806f60ac12e20119bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:1f:ed:9f:8e:b1:1a:7b:b7:e7:d3:19:be:c9:de:04:7d:75:
         a1:96:8d:58:84:1a:d2:df:ce:a0:95:a5:35:1c:6a:1c:b0:16:
         99:1c:9a:1d:cb:e1:8c:ff:df:15:b7:ed:06:53:d5:d3:68:1d:
         c7:18:00:34:6e:1c:99:4b:e6:04:f3:39:50:a5:a2:db:e6:79:
         5d:f7:86:c7:00:79:51:ba:74:cb:31:af:73:f7:58:85:01:c7:
         a8:14:48:a7:1c:f1:b1:68:bb:be:63:43:81:cc:8c:56:ee:18:
         04:7a:27:f2:13:70:25:ad:cf:99:a6:31:4c:ba:1b:00:08:05:
         86:aa:58:0a:a9:92:f2:31:27:f1:9e:78:6f:47:cb:c4:73:21:
         6d:be:69:4e:12:62:74:1e:a1:29:21:fd:7c:19:cb:54:ee:14:
         f9:54:fe:dc:9a:eb:7a:b3:da:a7:84:84:42:65:b6:66:c7:a9:
         79:fb:4e:57:82:cb:d5:11:1d:ca:78:54:65:ec:62:53:b2:75:
         da:2d:34:d0:e1:ed:3e:a5:68:a6:a2:be:d7:ca:54:31:7c:df:
         f4:b4:8e:3b:fb:4c:91:37:15:39:ac:e9:42:7e:3b:89:23:68:
         76:3f:52:84:0d:f8:8e:28:7e:9d:a5:11:6e:5d:e4:ca:c9:9d:
         6c:e4:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org